Latest Published Vulnerabilities CVE

Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.8

HIGH

CVE-2024-9167

Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local authenticated attacker to achieve local privilege escalation....

Affected Products : velocity_license_server
Published: Oct. 08, 2024

Modified: Aug. 13, 2025
9.6

CRITICAL

CVE-2024-4405

Xiaomi Pro 13 mimarket manual-upgrade Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to ex...

Affected Products : xiaomi_13_pro_firmware xiaomi_13_pro
Published: May. 02, 2024

Modified: Aug. 13, 2025
9.6

CRITICAL

CVE-2024-4406

Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required ...

Affected Products : xiaomi_13_pro_firmware xiaomi_13_pro
Published: May. 02, 2024

Modified: Aug. 13, 2025
7.5

HIGH

CVE-2023-27334

Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Softing edgeConnector Siemens. Authenticati...

Affected Products : secure_integration_server edgeconnector edgeaggregator opc_ua_c\+\+_software_development_kit
Published: May. 03, 2024

Modified: Aug. 13, 2025
9.6

CRITICAL

CVE-2023-27335

Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. User interaction is required to exploit this ...

Affected Products : secure_integration_server edgeaggregator
Published: May. 03, 2024

Modified: Aug. 13, 2025
7.5

HIGH

CVE-2023-27336

Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Softing edgeConnector Siemens. Authentica...

Affected Products : secure_integration_server edgeconnector edgeaggregator
Published: May. 03, 2024

Modified: Aug. 13, 2025
7.8

HIGH

CVE-2023-27347

G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G Data Total Security. An attacker must first obtain the ability to execute low-pr...

Affected Products : total_security
Published: May. 03, 2024

Modified: Aug. 13, 2025
7.8

HIGH

CVE-2023-27362

3CX Uncontrolled Search Path Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of 3CX. An attacker must first obtain the ability to execute low-privileged code on the targe...

Affected Products : 3cx
Published: May. 03, 2024

Modified: Aug. 13, 2025
4.3

MEDIUM

CVE-2024-20497

A vulnerability in Cisco Expressway Edge (Expressway-E) could allow an authenticated, remote attacker to masquerade as another user on an affected system. This vulnerability is due to inadequate authorization checks for Mobile and Remote Access (MRA) u...

Affected Products : expressway telepresence_video_communication_server expressway-e
Published: Sep. 04, 2024

Modified: Aug. 12, 2025
7.4

HIGH

CVE-2025-3155

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment....

Affected Products : enterprise_linux debian_linux enterprise_linux_server_aus enterprise_linux_server_tus enterprise_linux_eus yelp enterprise_linux_for_ibm_z_systems_eus enterprise_linux_for_power_little_endian enterprise_linux_for_power_little_endian_eus codeready_linux_builder +12 more products
Published: Apr. 03, 2025

Modified: Aug. 12, 2025
7.5

HIGH

CVE-2024-12088

A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which ...

Affected Products : enterprise_linux enterprise_linux_server_aus openshift_container_platform enterprise_linux_eus enterprise_linux_for_ibm_z_systems_eus enterprise_linux_for_power_little_endian enterprise_linux_for_power_little_endian_eus enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions rsync enterprise_linux_for_ibm_z_systems +10 more products
Published: Jan. 14, 2025

Modified: Aug. 12, 2025
7.5

HIGH

CVE-2024-12087

A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the ...

Affected Products : enterprise_linux enterprise_linux_server_aus enterprise_linux_eus enterprise_linux_for_ibm_z_systems_eus enterprise_linux_for_power_little_endian enterprise_linux_for_power_little_endian_eus enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions rsync suse_linux enterprise_linux_for_ibm_z_systems +8 more products
Published: Jan. 14, 2025

Modified: Aug. 12, 2025
7.5

HIGH

CVE-2024-12085

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uniniti...

Affected Products : enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_tus openshift_container_platform enterprise_linux_eus openshift enterprise_linux_for_ibm_z_systems_eus enterprise_linux_for_power_little_endian enterprise_linux_for_power_little_endian_eus +13 more products
Published: Jan. 14, 2025

Modified: Aug. 12, 2025
6.1

MEDIUM

CVE-2025-54783

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 7.14.6 and below have a Reflected Cross-Site Scripting (XSS) vulnerability. This vulnerability allows an attacker to execute JavaScript code...

Affected Products : suitecrm
Published: Aug. 07, 2025

Modified: Aug. 12, 2025
8.6

HIGH

CVE-2025-54784

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. There is a Cross Site Scripting (XSS) vulnerability in the email viewer in versions 7.14.0 through 7.14.6. An external attacker could send a prepared...

Affected Products : suitecrm
Published: Aug. 07, 2025

Modified: Aug. 12, 2025
3.7

LOW

CVE-2025-54787

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. There is a vulnerability in SuiteCRM version 7.14.6 which allows unauthenticated downloads of any file from the upload-directory, as long as it is na...

Affected Products : suitecrm
Published: Aug. 07, 2025

Modified: Aug. 12, 2025
4.5

MEDIUM

CVE-2025-52893

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. OpenBao before v2.3.0 may leak sensitive information in logs when processing malformed data. This is separate from the...

Affected Products : openbao
Published: Jun. 25, 2025

Modified: Aug. 12, 2025
7.5

HIGH

CVE-2025-52894

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. OpenBao before v2.3.0 allowed an attacker to perform unauthenticated, unaudited cancellation of root rekey and recover...

Affected Products : openbao
Published: Jun. 25, 2025

Modified: Aug. 12, 2025
7.2

HIGH

CVE-2025-54996

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and below, accounts with access to highly-privileged identity entity systems in root namespaces were...

Affected Products : openbao
Published: Aug. 09, 2025

Modified: Aug. 12, 2025
5.3

MEDIUM

CVE-2025-54998

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 through 2.3.1, attackers could bypass the automatic user lockout mechanisms in the OpenBao Userpass ...

Affected Products : openbao
Published: Aug. 09, 2025

Modified: Aug. 12, 2025

Showing 20 of 290958 Results

1
...
150
151
152
153
154
155
156
...
14548

Latest CVE Feed

7.8

9.6

9.6

7.5

9.6

7.5

7.8

7.8

4.3

7.4

7.5

7.5

7.5

6.1

8.6

3.7

4.5

7.5

7.2

5.3

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable